Suggestions appear as you type. Use the up and down arrows to choose one and Enter to open it.

Head-to-head · SBOM Generation Tools

Keysight SBOM Generator vs cdxgen

  • Updated Nov 2026
  • Both researched from official sources
  • 7 checks side by side
Higher score Keysight SBOM Generator #4 in SBOM Generation Tools 8.4/10 Pricing on request ✓ 4 of 6 features Visit Keysight
cdxgen #6 in SBOM Generation Tools 7.9/10 Free plan Free plan✓ 6 of 6 features Visit cdxgen

Keysight SBOM Generator leads on 0 checks, cdxgen on 1, and 6 are even. Who comes out ahead on the 7 yes/no, price and count checks where we have data for both products. The editor score weighs everything else too.

Our verdict

  • Highest scoreKeysight SBOM Generator · 8.4/10
  • Free planonly cdxgen
  • Most featurescdxgen · 6 of 6

Keysight SBOM Generator scores higher on our rubric for sbom generation tools: 8.4 against 7.9 out of 10; our editors rank them #4 and #6.

cdxgen offers source code input; Keysight SBOM Generator doesn't.

Keysight SBOM Generator is the better fit for SBOMs from compiled binaries and firmware. cdxgen is the better fit for multi-ecosystem source, container, and binary SBOMs.

  • Keysight SBOM Generator fits best

    SBOMs from compiled binaries and firmware

  • cdxgen fits best

    Multi-ecosystem source, container, and binary SBOMs

Advertiser disclosure: iTechGuides is reader-supported. Vendors can pay for top positions in our rankings and for a place on other products' pages, and we may earn a commission when you click some links. Bought places stand at the number bought; this page and our disclosure say so. Paying vendors may get a fuller, more detailed review from our editors, and that review can change their score. How we rank.

Side by side

Feature Keysight SBOM Generator 8.4/10 Visit ↗ cdxgen 7.9/10 Visit ↗
At a glance
Editor score 8.4 7.9
Ranking #4 in SBOM Generation Tools #6 in SBOM Generation Tools
Best for SBOMs from compiled binaries and firmware Multi-ecosystem source, container, and binary SBOMs
Pricing model Paid Free
Starting price Pricing on request Free plan
Free plan Not checked yet ✓ (best)
Free trial — —
Deployment Cloud Self-hosted, Cloud
Platforms Web Linux, macOS, Windows
Built for Mid-market, Enterprise Solo, Small business, Mid-market, Enterprise
Features Keysight SBOM Generator 4/6 · cdxgen 6/6
SPDX output ✓ ✓
CycloneDX output ✓ ✓
Source code input — ✓ (best)
Container image input ✓ ✓
Binary input ✓ ✓
Build-pipeline support Not checked yet ✓ (best)
Our review
Pros
  • Extracts SBOMs from compiled binaries and firmware without source code access
  • Analyzes containers and identifies open-source and proprietary components
  • Outputs SPDX 2.3 and CycloneDX 1.6 using binary similarity and code emulation
  • Generates CycloneDX BOMs from source, repositories, containers, and binaries
  • Exports SPDX 3.0.1 JSON-LD and supports CI/CD pipelines
  • Companion commands audit, validate, sign, and convert BOMs
Cons
  • Does not take source code as input
  • Cloud deployment may not suit teams requiring another deployment model
  • Pricing is quote-based rather than publicly listed
  • Command-line workflow may not suit teams seeking a graphical interface
  • Support channels are community and documentation
  • Its primary native output is CycloneDX, with SPDX available as an export
Our verdict

Keysight SBOM Generator identifies software components in compiled binaries, firmware images, and containers, including open-source and proprietary components. It is aimed at manufacturers and mid-market or enterprise teams that need…

Read the review →

cdxgen is an open-source command-line tool for generating software bills of materials from source code, repositories, package URLs, container images, and binary artifacts. It is aimed at developers, build engineers, and AppSec or…

Read the review →
  1. Keysight SBOM GeneratorSBOM Generation Tools 8.4Pricing on request
  2. cdxgenSBOM Generation Tools 7.9Free plan

Strengths and trade-offs

  • Keysight SBOM Generator — where it wins

    • Extracts SBOMs from compiled binaries and firmware without source code access
    • Analyzes containers and identifies open-source and proprietary components
    • Outputs SPDX 2.3 and CycloneDX 1.6 using binary similarity and code emulation

    Where it doesn't

    • Does not take source code as input
    • Cloud deployment may not suit teams requiring another deployment model
    • Pricing is quote-based rather than publicly listed

  • cdxgen — where it wins

    • Generates CycloneDX BOMs from source, repositories, containers, and binaries
    • Exports SPDX 3.0.1 JSON-LD and supports CI/CD pipelines
    • Companion commands audit, validate, sign, and convert BOMs

    Where it doesn't

    • Command-line workflow may not suit teams seeking a graphical interface
    • Support channels are community and documentation
    • Its primary native output is CycloneDX, with SPDX available as an export
  • Keysight SBOM Generator8.4/10 · Pricing on request

    A binary-focused SBOM tool for teams tracking components in shipped software.

    Visit KeysightFull verdict →
  • cdxgen7.9/10 · Free plan

    A flexible SBOM command-line tool spanning source, containers, and binaries.

    Visit cdxgenFull verdict →

More comparisons

All SBOM generation tools comparisons → · Full ranking →

Reviewed by iTechGuides Editors · Editorial team · Updated Nov 2026

Last updated · How we research and update